op-tee

This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.

Trusted Gateway: hardened router architecture with ARM TrustZone protected firewall, routing, and NIC modules.

Plug & Trust middleware to use secure element SE050

Tutorial and base project: TEE on AMD Zynq UltraScale+ using Arm TrustZone

A TEE solution for Raspberry Pi using OP-TEE, built on TF-A, U-Boot, and buildroot. This is our implementation to get a version of this working, and is not supported by the above projects.

Why Linux IMA can't extend TPM PCR[10] on NVIDIA Jetson AGX Orin — the fTPM is userspace/RPMB-gated (a known OP-TEE limitation, fixed in Linux 6.12). Root-cause analysis, evidence, and a TA-signed IMA-log attestation approach.

DBStore trusted service and demo of the HCE Mobile Ticketing application

Practical group work made for Secure Execution Environments @ UA - Portugal.

Testing the security of an OP-TEE installation

Example of an encrypted connection via TLS with mutual authentication using X.509 certificates

Twenty embedded Linux projects on one bench: one Yocto layer, one cross SDK, one entry point. Source rather than images, and ./go check proves what needs no hardware in about two minutes. Board measurements are published with their provenance, including the criteria that were measured and not met.

Upstream-first Buildroot external tree for STM32MP135D, targeting the MyIR MYD-YF135-256N-256D SOM